Skip to content 🛡️ Defensive Countermeasures Playbook
- Objective: Enable and configure protective software like firewalls and anti-virus.
- Tools:
Windows Security
wf.msc (Windows Defender Firewall)
- Common Actions:
- Enable Firewall: Go to Windows Security and ensure the Firewall is on for all network profiles (Domain, Private, Public).
- Enable Antivirus: In Windows Security, go to “Virus & threat protection” and ensure “Real-time protection” is on.
- Run a Scan: Run a “Quick Scan” or “Full Scan” for malware.
- Encryption: If required, enable BitLocker (Drive Encryption).
`
- Objective: Enable and configure protective software like firewalls and encryption.
- Tools:
- Common Actions:
- Enable Firewall: The standard is UFW (Uncomplicated Firewall).
sudo ufw enable.
sudo ufw default deny incoming.
sudo ufw default allow outgoing.
- Allow Essential Services: Explicitly allow required services, e.g.,
sudo ufw allow ssh.
- Encryption: Check if home folder or full disk encryption is enabled.